Refactor: Auth & Identity System v1.4

- Fix: Resolved SQLAlchemy Mapper error for 'UserVehicle' using string-based relationships.
- Fix: Fixed Postgres Enum case sensitivity issue for 'userrole' (forcing lowercase 'user').
- Fix: Resolved ImportError for 'create_access_token' in security module.
- Feature: Implemented 2-step registration protocol (Lite Register -> KYC Step).
- Data: Added bank-level KYC fields (mother's name, ID/Driver/Boat/Pilot license expiry and categories).
- Business: Applied private fleet isolation (is_transferable=False for individual orgs).
- Docs: Updated Grand Master Book to v1.4 and added Developer Pitfalls guide.

backend/app/core/security.py

@@ -1,49 +1,20 @@
+# /opt/docker/dev/service_finder/backend/app/core/security.py
 from datetime import datetime, timedelta, timezone
 from typing import Optional, Dict, Any
-
 import bcrypt
-from jose import jwt, JWTError
-
+from jose import jwt
 from app.core.config import settings
 
-# --- JELSZÓ KEZELÉS ---
-
 def verify_password(plain_password: str, hashed_password: str) -> bool:
-    """
-    Összehasonlítja a nyers jelszót a hash-elt változattal.
-    """
-    try:
-        if not hashed_password:
-            return False
-        return bcrypt.checkpw(
-            plain_password.encode("utf-8"),
-            hashed_password.encode("utf-8")
-        )
-    except Exception:
-        return False
+    if not hashed_password: return False
+    return bcrypt.checkpw(plain_password.encode("utf-8"), hashed_password.encode("utf-8"))
 
 def get_password_hash(password: str) -> str:
-    """
-    Biztonságos hash-t generál a jelszóból.
-    """
     salt = bcrypt.gensalt()
     return bcrypt.hashpw(password.encode("utf-8"), salt).decode("utf-8")
 
-# --- JWT TOKEN KEZELÉS ---
-
 def create_access_token(data: Dict[str, Any], expires_delta: Optional[timedelta] = None) -> str:
-    """
-    JWT Access tokent generál a megadott adatokkal és lejárati idővel.
-    """
-    to_encode = dict(data)
-    expire = datetime.now(timezone.utc) + (
-        expires_delta or timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES)
-    )
+    to_encode = data.copy()
+    expire = datetime.now(timezone.utc) + (expires_delta or timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES))
     to_encode.update({"exp": expire})
-    return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=settings.ALGORITHM)
-
-def decode_token(token: str) -> Dict[str, Any]:
-    """
-    Dekódolja a JWT tokent.
-    """
-    return jwt.decode(token, settings.SECRET_KEY, algorithms=[settings.ALGORITHM])
+    return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=settings.ALGORITHM)